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AMENDMENTS TO THE CLAIMS: 

The following listing of claims supersedes all prior versions and listings of claims in this 
application: 

1 . Cancelled. 

2. (Previously Presented) The system according to claim 16 in which the 
notification takes the form of a non-executable data file. 

3. (Previously Presented) The system according to claim 2 in which the notification 
takes the form of a simple text file containing an extensible Markup Language, XML, document. 

4. (Previously Presented) The system according to claim 16 wherein the notification 
means is operable to run separate threads for controlling the forwarding of separate notifications 
to the client application. 

5. (Previously Presented) The system according to claim 16, wherein the 
notification means includes means for permitting each service provided by the first sub-system to 
specify the number of times which a notification is to be retried in the event of failure to deliver 
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the notification and means for server retrying to deliver the notification up to the specified 
number of times in the event of failure to deliver the notification over the non-secure network. 

6. (Previously Presented) The system according to claim 16 wherein a single 
notification server receives notifications from plural services and forwards these to plural client 
application hosting sub-systems. 

7. Cancelled. 

8. (Previously Presented) The system according to claim 16, 

wherein the first sub-system is a backend sub-system which provides services to the 
gateway, and 

wherein the server sub-system acts as a trusted intermediary between each application 
hosting sub-system and the backend sub-system. 

9-15. Cancelled. 

16. (Currently Amended) A system comprising: 

programmed computer devices which execute program code to provide a first sub-system 
and a gateway for offering services provided by the first sub-system to one 
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or more application hosting sub-systems via the gateway and a data communications network 
between said gateway and sub-systems; 

the gateway and each application hosting sub-system being arranged to permit each 
application hosting sub-system to initiate a secure and authenticated connection from each 
application hosting sub-system to the gateway via a non-secure data network connection, and 

the gateway being logically connected to the first sub-system to enable the services 
provided by the first sub-system to be provided to each application hosting sub-system via a 
secured and authenticated connection, 

the gateway including notification means for initiating an unauthenticated and 
unencrypted connection to one or more of the application hosting sub-systems and transmitting 
over this or each such connection a notification for notifyin g said one or more of the application 
hosting sub-systems that it should initiate a secure authenticated connection with the gateway 
when the notification means is requested so to do by any one of the services offered by the first 
sub-system. 

1 7. (Currently Amended) A method of offering services provided by a first sub- 
system to one or more application hosting sub-systems via a gatewa y which includes a 
notification means for notifying one or more of the application hosting sub-systems that it should 
initiate a secure authorized connection with the gateway , the gateway and each application 
hosting sub-system being arranged to permit each application hosting sub-system to initiate a 
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secure and authenticated connection from each application hosting sub-system to the gateway via 
a non-secure data network connection, and the gateway being logically connected to the first 
sub-system to enable the services provided by the first sub-system to be provided to each 
application hosting sub-system via a secured and authenticated connection, the method 
comprising : 

sending a request from a service wishing to set up a secure and authenticated connection 
to an application hosting sub-system that the notification means send a notification to a 
respective application hosting sub-system to notify it that it should initiate a secure authenticated 
connection with the gateway; 

initiating from the notification means to the application hosting sub-system an 
unauthenticated and unencrypted connection and transmitting over this connection the 
notification for notifying said application hosting sub-system that it should initiate a secure 
authenticated connection with the gateway; 

causing the application hosting sub-system to set up a secure and authenticated 
connection with the gateway in response to receipt of the notification; and 

communicating with the initiating service via said connection. 

18. (Previously Presented) Computer readable storage media containing a program or 
suite of computer programs for controlling one or more computer processors to carry out the 
steps of claim 1 7 during execution of the computer program or suite of programs. 
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